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t iQTTWfj r>y THE. CLAIMS 

This listing of claims will repine all prior versions, and listings, of claims in the present 
application. Additions are identified by ^derlming. Deletions are indicated by stBketh^ or 
[[double brackets]]. 

Claim 1 (currently amended) A communication network, comprising: 

(A) local communication links, 

(B) a plurality of separately located central office switching systems interconnected via 
trunk circuits for selectively providing switched call connections between at least two of me 
local communication links, 

(C) a signaling communication system including at least one signaling network element, 
said signaling communication system configured to provide two-way communications of control 
data messages between and among said central office switching systems and said signaling 
network element, said signaling communication system interconnecting the central office 
switching systems and said signaling network element; 

(D) a signaling gateway, separate from the central office switching systems and 
connected to said signaling communications system, said signaling gateway including an 
interface connected to a remote communications network and configured to exchange said 
control data messages between said remote communication network and said signaling 
communication system, and 

(E) a signaling system security monitor, separate from the central office switching 
systems, said signaling system security monitor configured to maintain records of contexts of 
existing calls pud transactions, pirate whether control data messages are appropriate to 
those contexts determine if oaid control d at a mpooQgoo are contractually proper . 

Claim 2 (original) The communications network according to claim 1 wherein said 
signaling system security monitor is configured to evaluate said control data messages to 
determine an effect of said control messages if acted upon by one of (i) said central office 
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switching systems and (ii) said network element and, in response, determine if said control data 
messages are proper. 

Claim 3 (original) The communications network according to claim 1 wherein said 
signaling system security monitor is further configured to correlate messages associated with a 
call or transaction to ensure that a proper relationship exists between parameter values in the 
correlated messages. 

Claim 4 (original) The communications network according to claim 1 wherein said 
control data messages comprise ISUP messages. 

Claim 5 (currently amended) The communications network according to claim 4 [[1]] 
wherein said signaling system security monitor is configured to selectively communicate said 
ISUP messages between said signaling gateway and one of said central office switching systems 
in response to a determination that said ISUP messages are proper. 

Claim 6 (original) The communications network according to claim 1 wherein said 
signaling network element comprises a service control point (SCP) wherein said signaling 
system security monitor is configured to evaluate said control data messages sent to and received 
from said SCP, and correlate said messages to determine that said messages are proper and to 
ensure that a proper relationship exists between said messages and between parameter values of 
said messages. 

Claim 7 (original) The communications network according to claim 1 wherein said 
control data messages comprise TCAP messages. 



Claim 8 (cancelled) 
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Claim 9 (currently amended) A communication network, comprising: 

(A) local communication links, 

(B) aplurality of separately located central office switching systems interconnected via 
trunk circuits for selectively providing switched call connections between at least two of the 
local communication links in response to predetermined control data messages, 

(C) a signaling communication system for two-way communications of said control data 
messages between said central office switching systems, said signaling communication system 
interconnecting the central office switching systems; 

(D) a signaling gateway, separate from the central office switching systems and 
connected to said signaling communications system, said signaling gateway including an 
interface connected to a remote communications network and configured to exchange said 
control data messages between said remote communication network and said signaling 
communication system, and 

(E) a signaling system security monitor, separate from the central office switching 
systems ™* farming » me-^r a 8tate " f ™* ^rnmunication system, said signaling 
system security monitor configured to determine if said control data messages are eaatesteatty 
proper. 



Claim 10 (cancelled) 

Claim 11 (currently amended) A [[The]] communications network wording to claim 9 
comprising: 

(A\ local communication links^ 

n f f w g «t Y nf senaratelv }^««* r.antml office switching systems interconnected via 
tnmlc circuits for ■rf^tivelv provid e r ^trhnri call connections between at least two of the 
local communis;™ linTo. in response to predeter mined control data messag es, 
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n „ ^ w .^nniotion « y^™ far two-way communications of said control data 
~~**o~ between sa ^ ^t™1 nffice switching systems said signaling cornrmrnication system 
interconnectinp the central o f"- c^trhing systems; 

^ . ^a^p patewav. se r ™** frnm the central office switchinp systems and 
^ner**\ to said ^ f™ 1 ™* c^nmuni rations system , said Hpnulinp pateway including an 
in^e ernm^H * ™mote cor rections network and configured to exchange said 
ft ffnhttl data mes^e* between sa ^ remote communication network and said signaling 
communication system, and 

(fil a signaling system aecuritv m nnitor. separate from the central office switching 
s ystems, said si f ting system s ^ iritv monitor configured to determine, if said control data 
n^apes are proper wh um iu „u id oign nling ^ tnm c om ity monit or in f uill m c cnng .rnd t o and 
correlate messages associated with a call or transaction to ensure that a proper relationship exists 
between parameter values in the correlated messages. 

Claim 12 (currently amended) The communications network according to claim 9 [[10]] 
wherein said control data messages comprise ISUP messages. 

Claim 1 3 (original) The communications network according to claim 12 wherein said 
signaling system security monitor is configured to selectively communicate said ISUP messages 
between said signaling gateway and one of said central office switching systems in response to a 
determination that said ISUP messages are proper. 

Claim 14 (currently amended) The communications network according to claim 9 [[10]] 
further comprising a service control point (SCP) wherein said signaling system security monitor 
is configured to evaluate said control date messages sent to and received from said SCP, and 
correlate said messages to determine that said messages are proper and to ensure that a proper 
relationship exists between said messages and between parameter values of said messages. 



5 

PAGE 9124 * RCVD AT 2/912006 11:57:00 AM [Eastern Standard Time] * SVR:USPTO-EFXRF-6i28 ' DNiS:2738300 ' CSID:9727183946 ' DURATION (mm-ss):07-24 



d2 /09/0 B THU 11:58 FAX 9727183946 VERIZON IP -»-»-> USPATENT-AMEND @]010 



Claim 15 (currently amended) The communications network according to claim 9 [[10]] 
wherein said control data messages comprise TCAP messages. 

Claim 16 (original) The communications network according to claim 15 further 
comprising a service control point (SCP) wherein said signaling system security monitor is 
configured to selectively communicate said TCAP messages between said signaling gateway and 
SCP in response to a determination that said TCAP messages are proper. 

Claim 17 (currently amended) The communications network according to claim 9 
wherein said «t*te nf said com m ""^ti™* network includes paling oystom s e curity monito r h 
uunfigurodto maintain records of the contexts of existing calls and transactions, and said 
si bling system s»™tv monitor is configured to evaluate whether monitored messages are 
appropriate to those contexts. 

Claim 18 (currently amended) A [[The]] communications network according to olaim9 
comprising: 

(M local communication links., 

(U) a plurality of seoRrrtelv located c entral office switching systems interconnected via 
trunk circuits selectively providing switched call co nne ctions between at least two of the 
local communication links ir, response tn predetermined control data messages, 

fr > a si pnaline communication svs t *m for two-wav communications of said control data 
messages bet ween said central o ™ c * switching systems, said signaling communication system 
interconnecting the central office switching systems; 

fnl a signaling gateway, separat e, from the central office switching systems and. 
connected to niA baling c o mmunications system, said signaling pateway including an , 
interface cor ™*** to a reit mt* communic a tions network and configured to exchange s aid 
control data messages betw e *" remote communication network and said signaling 
communication system, and 
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fp f ) * ri^atinp ; system s^nritv monitor, s e parate from the central office switching 
systems, said sigr ^ r sec u rity monitor configured to determine if said control data 

messages are proper- wb oro in said signaling oyatoni oocuiity monitor i o configur e d to and 
selectively enable and inhibit said signaling gateway from exchanging said conlxol data messages 
between said remote communication network and said signaling communication system. 

Claim 19 (currently amended) The communications network according to claim 9 
wherein said signaling communication system includes a service control point (SCP), aad said 
sta te of said communications network includes dialing oyntom ooouiity monitor fonludot) n 
momoryotoring states of said central office switching systems and said SCP, and said si gnaling 
■= ystem security monitor is y wu ^ oi additionally responsive to said states for determining if said 
control messages are proper. 

Claim 20 (currently amended) A [[The]] communications network according to claims 
comprising; 

( local communication links. 

(K) a plurality of separately located central office switc hi n g sy stems interconnected via 
trunk circuits for selectively proving switched call co nnections between at least two of the 
local communication links in response t o predetermined control data messages, 

fP ) a signaling communication system for two - way communications of said control data 
messages between said central o ffW switching systems, said signaling communication system 
interconnecting the central offic e switching systems; 

(T>> a si gnaling gateway, separate fr om the central office switching systems and 
connected to said signaling communications s y ste m, sa id sipnaling gateway including , an 
interface connected to a remo t e communications network and configured to exchange said 
control data messages between said remote communication network and said signaling 
r-nmr n i mication sys tem, and 

(P) a signaling system security m onitor, separate from the central office switching 
systems, sai ^ paling sys tem security m onitor configured to determine if said control dafe 
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messages are proper wteeHHsaid b y -lum nmirit y m onitor 4b configured to and 

selectively modify said control messages in response to a determination of the propriety of said 
control messages. 

Claim 21 (cancelled) 

Claim 22 (currently amended) A [[The]] communications network according to claim 
aj -comprising: 

(A) local communication links, 

(Ft) a plurality of separately located c e ntral office switching systems interconnected via 
trunk circuits for selectively pro v ing switched call connections between at least two of the 
local commi^ ^-flttnn links in response to prftdeteirmnecl control data messages, 

fr) a si gnaling communication syste m for two-wav communications of paj4 control data 
memoes between said central office switchi ng systems, said simalinp communication system, 
interconnecting the central office switching systems: 

fn> » signaling ga teway, separate from the cen tral office switching systems and 
connected to s*iri signaling co m munications system, said signaling gateway including an 
interface connected to a remo^ communicati o ns network and configured to exchange said 
control data messa ges between said remo t e communication network and said signaling 
communication system, and 

(K) a. signaling system security monitor, separ ate from the central office switching 
systems, said signaling system security monitor configured to dete rmine if said control data 
messages are proper; 

wherein said signaling gateway include s a signaling protocol converter, and said 
signaling protocol converter is configured to convert SS7 type messages to another packet data 
format 
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Claim 23 (previously presented) The communications network according to claim 22 
wherein the another packet data format is an Internet Protocol (IP) format. 

Claim 24 (currently amended) The communications network according to claim 22 
[[21]] wherein said signaling system security monitor is configured to monitor information 
contained in an MTP Layer 3 portion of said control data messages. 

Claim 25 (original) The communications network according to claim 24 wherein said 
information contained in said MTP Layer 3 portion of said control data messages includes (i) a 
destination point code, (ii) an originating point code, and (iii) a service indicator. 

Claim 26 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor at least one of SCCP, ISUP, TCAP, 
and ATN messages. 

Claim 27 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor a plurality of message types selected 
from SCCP, ISUP, TCAP, and AJN type messages. 



Claim 28 (cancelled) 

Claim 29 (currently amended) The communications network according to claim 30 
[[28]] wherein said signaling system security monitor is configured to determine if said 
monitored calling and called party address parameters are consistent with an authorized signaling 
relationship. 
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Claim 30 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor calling and called party address 
parameters contained in an SCCP message portion of said control data messages. 

Claim 3 1 (previously presented) The communications network according to claim 9 
wherein said signaling system security monitor is configured to monitor origination and 
destination point codes contained in an MTP header of the control data messages and calling and 
called party address parameters contained in the SCCP message portion of said control data 
messages. 

Claim 32 (currently amended) The communications network according to claim 9 
wherein said signaling system security monitor is configured to monitor origination and 
destination point code parameters contained in an MTP header of said control data messages and 
determine if a particular origination 4estiaatkm point code is authorized to send a particular 
message to a particular destination point code. 



Claim 33 (cancelled) 

Claim 34 (original) The communication network according to claim 9 wherein said 
signaling system security monitor includes a memory storing permissible states of said 
communications network and rules fox transitioning from each of said permissible states to 
others of said permissible states. 

Claim 35 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes a memory storing data relating call progress status 
with respective sets of control messages appropriate to initiate a next action consistent with a 
particular service. 
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Claim 36 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes a memory storing data relating transaction status with 
respective sets of control messages appropriate to initiate a next action consistent with a 
particular service. 

Claim 37 (currently amended) A [[The]] communications network a eeording to oloim 9 
comprising: 

(A^ local communication links, 

fR) a plurality of separately located ce n tral office switching systems interconnected via 
trunk circuits for selectively pro v ing switched call connections between at least two of the 
local commu niration links in res ponse to predetermined control data messages, 

fH ) a signaling commnni cation system for two-way com mu nications of said control data 
messages between said central o f fice switching systems, said signaling communication system 
intercooriectinp ; the central office switching systems; 

{TV. a signaling r *tewav. separate from the cen tr al office sw itching systems and 
connected to said signaling c^nm.mications "v^m- said signaling gateway including , an 
interface connected to a remote communicati o ns network and configured to exchange said 
control data messages between said rem o te communication network and said signaling 
communication system, and 

fF) a si pnalins system security moni t or, senarate from the central office switching 
systems, said baling system security monit o r configured to determine if said control data 
merges are nroner. wherein said signaling system security monitor includes a memory storing 
a plurality of message templates. 

Claim 38 (previously presented) The communications network according to claim 37 
wherein said plurality of message templates are associated with aplurality of service providers. 
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Claim 39 (original) The communications network according to claim 38 wherein said 
signaling system security monitor associates each of said control data messages with a 
corresponding one of said service providers and selects one of said message templates in 
response to the corresponding one of said service providers. 

Claim 40 (currently amended) The communications network according to claim 37 [[9]] 
wherein said plurality of message templates signaling system bocurity monitor includ e n 
memory otoring sets of templates, each of said sets corresponding to a set of control messages 
appropriate to a particular call progress flow or transaction. 

Claim 41 (previously presented) The communications network according to claim 40 
wherein said sets of templates define message formats, parameters and values associated with 
control message types selected from SCCP, ISUP, TCAP and AIN type messages. 

Claim 42 (original) The communications network according to claim 40 wherein said 
signaling system security monitor is configured to select said sets of templates in response to 
service provider authorization data associated with respective ones of said control data messages. 

Claim 43 (original) The communications network according to claim 9 wherein said 
signaling system security monitor comprises a certification agent configured to exchange and 
maintain encryption key certificates. 

Claim 44 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to issue and decrypt digital time stamps. 

Claim 45 (original) The communications network according to claim 9 wherein said 
signaling system security monitor comprises a digital certificate issuing authority. 
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Claim 46 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes data encryption and decryption facilities. 

Claim 47 (previously presented) A method of securely interfacing control links of 
respective communication networks, comprising'. 

exchanging control data messages between a remote communication network and a local 
signaling communication system; 

interpreting said control data messages to deterrnine whether it is appropriate with respect 
to a destination point code of said control data messages and, in response, determining if said 
control data messages are contextually proper; 

selectively communicating said control data messages between central office switching 
systems; and 

selectively providing switched call connections between at least two of the local 
communication links in response to predetermined control data messages. 

Claim 48 (original) The method according to claim 47 wherein said step of interpreting 
include steps of maintaining records of the contexts of existing calls and transactions, and 
evaluating whether monitored messages are appropriate to those contexts. 

Claim 49 (currently amended) The method according to claim 47 wUo r oin oaid oignaling 
oystem wherein said step of selectively communicating control data messages includes 
selectively enabling and inhibiting said signaling gateway from exchanging said control data 
messages between said remote communication network and said signaling communication 
system. 
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Claim 50 (previously presented) The method according to claim 47 further including a 
step of storing states of respective ones of said central office switching systems, wherein said 
interpreting step is additionally responsive to said states for determining if said control messages 
are contextually proper. 

Claim 5 1 (original) The method according to claim 47 further comprising a step of 
selectively modifying said control messages in response to a determination of an impropriety of 
said control messages. 

Claim 52 (original) The method according to claim 47 further comprising a step of 
converting a protocol of said control data messages between a protocol of said remote 
communication network and a protocol of said local signaling communication system. 

Claim 53 (original) The method according to claim 52 wherein one of said protocols is 
an SS7 compliant message protocol. 

Claim 54 (original) The method according to claim 52 wherein one of said protocols is 
an Internet Protocol (IP) format. 

Claim 55 (original) The method according to claim 52 wherein said signaling system 
security monitor is configured to monitor information contained in an MTP Layer 3 portion of 
said control data messages. 

Claim 56 (original) The method according to claim 55 wherein said information 
contained in said MTP Layer 3 portion of said control data messages includes (i) a destination 
point code, (ii) an originating point code, and (iii) a service indicator. 
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Claim 57 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring of at least one of SCCP, ISUP, TCAP, and AIN messages. 

Claim 58 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring of a plurality of message types selected from SCCP, ISUP, TCAP, and AIN 
type messages. 

Claim 59 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring of calling and called party address parameters contained in SCCP message 
portions of said control data messages. 

Claim 60 (original) The method according to claim 47 wherein said interpreting step 
includes determining if said monitor calling and called party address parameters are consistent 
with an authorized signaling relationship. 

Claim 61 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring calling and called party address parameters contained in an SCCP message 
portion of said control data messages. 

Claim 62 (previously presented) The method according to claim 47 wherein said 
interpreting step includes monitoring origination and destination point codes contained in an 
MTP header of the control data messages and calling and called party address parameters 
contained in an SCCP message portion of said control data messages. 

Claim 63 (previously presented) The method according to claim 47 wherein said 
interpreting step includes monitoring origination and destination point codes parameters 
contained in an MTP header of said control data messages and determining if a particular 
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destination point code is authorized to send particular message to a particular destination point 
code. 

Claim 64 (original) The method according to claim 47 further comprising a step of 
storing a state of said communications network. 

Claim 65 (original) The method according to claim 47 further comprising a step of 
storing (i) permissible states of said communications network and (ii) rules for transitioning from 
each of said permissible states to others of said permissible states. 

Claim 66 (original) The method according to claim 47 further comprising a step of 
storing data relating call progress status with respective sets of control messages appropriate to 
initiate a next action consistent with a particular service. 

Claim 67 (original) The method according to claim 47 further comprising a step of 
storing data relating transaction status with respective sets of control messages appropriate to 
initiate a next action consistent with a particular service. 

Claim 68 (original) The method according to claim 47 further comprising a step of 
storing a plurality of message templates. 

Claim 69 (original) The method according to claim 68 wherein said plurality of 
message templates are associated with a plurality of service providers. 

Claim 70 (original) The method according to claim 69 further comprising steps of: 
associating each of said control data messages with a corresponding one of said service 
providers; and 
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selecting one of said message templates in response to the corresponding one of said 
service providers. 

Claim 7 1 (original) The method according to claim 47 further comprising a step of 
storing sets of templates, each of said sets corresponding to control messages appropriate to 
particular call progress flow. 

Claim 72 (original) The method according to claim 71 wherein said templates define 
message formats, parameters and values associated with control message types selected from 
SCCP, ISUP, TCAP and AIM type messages. 

Claim 73 (original) The method according to claim 71 further comprising a step of 
selecting said sets of templates in response to service provider authorization data associated with 
respective ones of said control data messages. 

Claim 74 (original) The method according to claim 47 further comprising steps of 
exchanging and maintaining encryption key certificates. 

Claim 75 (original) The method according to claim 47 further comprising steps of 
issuing and decrypting digital time stamps. 

Claim 76 (original) The method according to claim 47 further comprising a step of 
issuing a digital certificate. 
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